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(54) Packet transfer scheme using mobile terminal and router for preventing attacks using global 
address 



(57) In a mobile connmunication network providing 
an Internet service, the arrived packets are delivered 
from the nearest neighbor router device to the mobile 
temriinal device according to the need such as when a 
prescribed application is activated or when a prescribed 



packer has arrived, by using message exchanges be- 
tween the nearest neighbor router device and the mobile 
temninal device, so that It becomes possible to prevent 
the unnecessary packet attacks from the global Internet; 
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Description 

BACKGROUND OF THE INVENTION 

FIELD OF THE INVENTION 

[0001] The present invention relates to a mobile com- 
munication device for carrying out communications 
while moving among a plurality of Interconnected net- 
works such as mobile telephone network, internet, lo- 
cally connected device network, and a router device pro- 
vided in a mobile communication network for providing 
the Internet service. 

DESCRIPTION OF THE RELATED ART 

[0002] In conjunction with the rapid spread of portable 
telephones and the intemet, the internet sen^ice using 
a portable telephone as a tenninai has been developed 
by the mobile carriers. This is a sendee In which a mod- 
ule for processing a communication protocol called 
TCP/IP used in the Internet is provided in the portable 
telephone so as to enable WWW service, e-mail deliv- 
ery, stiti/video image transfer, etc. This service has an 
advantage in that it becomes possible to freely access 
not Just Infonnation closed within the communication 
service provider but also various information available 
on the intemet that is spreading worldwide, and for this 
reason the number of users of this service is increasing 
rapidly. 

[0003] Now, the portable telephone internet service 
that has an enormous number of users encounters a se- 
rious problem regarding how to assign addresses to ter- 
minals. Cunently, the intemet faces with the problem of 
IP address shortage in view of the ever increasing 
number of nodes (routers and terminals), and in the cur- 
rent IPv4, it has been customary to use an address sys- 
tem called private address that Is closed within an or- 
ganization for accesses In an enterprise network or the 
like and to use global addresses only for accesses to 
the external of the organization by utilizing the address 
conversion. Similarly, in the case of the portable tele- 
phone Intemet service, it is cun'ently customary to use 
the private address within the cellular phone network by 
providing an address conversion device (NAT: Network 
Address Translator) at a border between the IP packet 
network of the portable telephone company and the glo- 
bal Internet. 

[0004] On the other hand, the next generation IP 
specification called IPv6 is currently under the discus- 
sion. The IPv6 can accommodate far more nodes com- 
pared with the iPv4 by expanding the IP address from 
a 32 bits width as used in the IPv4 to a 128 bits width. 
Similarly, in the case of the portable telephone Internet 
service, it is possible to assign unique global addresses 
to all tenninals by adopting the IPv6. In this way, com- 
munications using a seamless end-to-end connection 
that does not require a relay device such as NAT on the 
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communication path can be realized by using a wide ad- 
dress space, and It is expected to be advantageous in 
many aspects including the security and the communi- 
cation quality guarantee. 

5 [0005] The I Pv6 has various advantages as described 
above, but from a viewpoint of operating the actual port- 
able telephone Intemet, for example, always assigning 
a global address to each temiinal can cause a problem. 
Namely, when a global address is assigned to a temnl- 

10 nal, this terminal becomes accessible from all nodes on 
the internet so that this temninal can potentially be a tar- 
get of attacks such as that for sending a large amount 
of unnecessary packets, for example. 
[0006] However, a provision of providing a packet fil- 

is ter or a firewall on a route in order to prevent such at- 
tacks is not preferable because it goes against the es- 
sence of the IPv6 that transparent end-to-end commu- 
nications are possible. Also, a more passive provision 
of not registering a name of a tenninai to a name server 

20 in order to prevent attacks from the external does not 
provide a full solution to the problem because the 
number of applications that require the resolution of a 
name of a tenminal Itself such as VoIP Is increasing. 

25 BRIEF SUMIVIARY OF THE INVENTION 

[0007] It is therefore an object of the present invention 
to provide a packet transfer scheme using a mobile ter- 
minal device and a router device, in which each mobile 

30 tenninai device can carry out transparent end-to-end 
communications with arbitrary node on the Internet by 
using a global address of the IPv6 in full compliance with 
the IPv6 system and policy, while realizing a function for 
preventing attacks such as that of packet transmission 

35 to a global address. 

[0008] According to one aspect of the present inven- 
tion there is provided a packet transfer method, com- 
prising: generating a global address that is unique on 
Intemet at a mobile terminal device, the global address 

40 being an address which should be used by the mobile 
terminal device In utilizing an Internet service provided 
by a mobile communication network to which the mobile 
tenninai device Is connected, according to a message 
received from a nearest neighbor router device in the 

45 mobile communication network; notifying a first mes- 
sage indicating a start of a utilization of the Intemet serv- 
ice using the global address, from the mobile terminal 
device to the nearest neighbor router device at a time 
of starting the utilization of the Intemet service using the 

50 global address; delivering arrived packets destined to 
the global address of the mobile terminal device from 
the nearest neighbor router device to the mobile tenni- 
nai device upon receiving the first message at the near- 
est neighbor router device; notifying a second message 

55 Indicating an end of the utilization of the Intemet service 
using the global address from the mobile terminal device 
to the nearest neighbor router device at a time of ending 
the utilization of the Intemet service using the global ad- 
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dress; and discarding arrived packets destined to the 
global address of the mobile terminal device at the near- 
est neighbor router device upon receiving the second 
message at the nearest neighbor router device. 
[0009] According to another aspect of the present In- 
vention there is provided a packet transfer method, com- 
prising: generating a global address that is unique on 
Internet at a mobile terminal device, the global address 
being an address which should be used by the mobile 
tenninai device In utilizing an intemet service provided 
by a mobile communication network to which the mobile 
temnlnal device is connected, according to a message 
received from a nearest neighbor router device in the 
mobile communication network; notifying a first mes- 
sage indicating a start of a utilization of the Internet serv- 
ice using the global address, from the mobile temnlnai 
device to the nearest neighbor router device at a time 
of starting the utilization of the Internet service using the 
global address; delivering anived packets destined to 
the global address of the mobile temnlnai device from 
the nearest neighbor router device to the mobile tenni- 
nai devbe upon receiving the first message at the near- 
est neighbor router device; notifying a second message 
from the mobile terminal device to the nearest neighbor 
router device, when delivery to the mobile temnlnai de- 
vice of a specific packet that is destined to the global 
address of the mobile temnlnai device and that has been 
delivered from the nearest neighbor router device is not 
desired, the second message indicating a desire for not 
receiving the delivery of the specific packet to the mobile 
terminal device and a prescribed condition to be satis- 
fied by the specific packet; and discarding the specific 
packet that satisfies the prescribed condition indicated 
by the second message among arrived packets des- 
tined to the global address of the mobile temnlnai device 
at the nearest neighbor router device after receiving the 
second message from the mobile terminal device at the 
nearest neighbor router device. 
[0010] According to another aspect of the present in- 
vention there is provided a mobile temnlnai device, com- 
prising: a communication interface configured to make 
access to a mobile communication network; an address 
setting unit configured to set up a global address that is 
unique on Internet and that should be used by the mobile 
tennninal device in packet communications utilizing an 
Intemet service provided by the mobile communication 
network, according to a message received from a near- 
est neighbor router device in the mobile communication 
network; and a packet communication unit configured 
to can7 out the packet communications utilizing the In- 
ternet sen/ice, notify a first message indicating a start 
of a utilization of the Internet service using the global 
address to the nearest neighbor router device at a time 
of starting the utilization of the Internet service using the 
global address, and notify a second message Indicating 
an end of the utilization of the Intemet service using the 
global address to the nearest neighbor router device at 
a time of ending the utilization of the Intemet service 



using the global address. 

[001 1] According to another aspect of the present In- 
vention there Is provided a mobile terminal device, com- 
prising: a communication Interface configured to make 

5 access to a mobile communication network; an address 
setting unit configured to set up a global address that is 
unique on Intemet and that should be used by the mobile 
terminal device in packet communications utilizing an 
Internet service provided by the mobile communication 

10 network, according to a message received from a near- 
est neighbor router device in the mobile communication 
network; and a packet communication unit configured 
to carry out the packet communications utilizing the In- 
ternet service, notify a first message Indicating a start 

f5 of a utilization of the Internet service using the global 
address to the nearest neighbor router device at a time 
of starting the utilization of the Internet service using the 
global address, and notify a second message to the 
nearest neighbor router device, when delivery to the mo- 

20 bile temnlnai device of a specific packet that Is destined 
to the global address of the mobile temnlnai device and 
that has been delivered from the nearest neighbor router 
device is not desired, the second message Indicating a 
desire for not receiving the delivery of the specific packet 

25 to the mobile terminal device and a prescribed condition 
to be satisfied by the specific packet. 
[0012] According to another aspect of the present in- 
vention there Is provided a router device provided in a 
mobile communication network providing an Internet 

30 sen/ice. the router device comprising: a message 
processing unit configured to transmit a router message 
to be used in assigning a global address that Is unique 
on Internet with respect to a mobile terminal device with- 
in a network link to which the router device is connected; 

35 and a router processing unltconflgured to deliver arrived 
packets destined to the global address of the mobile ter- 
minal device, to the mobile temnlnai device upon receiv- 
ing a first message indicating a start of a utilization of 
the Intemet service using the global address from the 

40 mobile temnlnai device, and discard arrived packets 
destined to the global address of the mobile terminal de- 
vice upon receiving a second message Indicating an 
end of the utilization of the Internet service using the 
global address from the mobile temninat device. 

45 [001 3] According to another aspect of the present in- 
vention there is provided a router device provided in a 
mobile communication network providing an Internet 
service, the router device comprising: a message 
processing unit configured to transmit a router message 

so to be used In assigning a global address that is unique 
on Internet with respect to a mobile terminal device with- 
in a network linkto which the router device Is connected; 
and a router processing unltconflgured to deliver arrived 
packets destined to the global address of the mobile ter- 

55 mlnal device, to the mobile temnlnai device upon receiv- 
ing a first message indicating a start of a utilization of 
the Internet service using the global address from the 
mobile terminal device, and discard a specific packet 
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that satisfies a prescribed condition indicated by a sec- 
ond message among arrived packets destined to the 
global address of the mobile terminal device after re- 
ceiving a second message from the mobile terminal de- 
vice, the second message indicating a desire for not re- s 
ceiving delivery to the mobile tenninal device of the spe- 
cific packet that is destined to the global address of the 
mobile tenminal device and the prescribed condition to 
be satisfied by the specific packet. 
[0014] According to another aspect of the present in- 
vention there is provided a computer program product 
for causing a computer to function as a mobile tenninal 
device, the computer program product comprising: first 
computer program codes for causing the computer to 
make access to a mobile communication networi<; sec- 
ond computer program codes for causing the computer 
to set up a global address that is unique on Intemet and 
that should be used by the mobile tenninal device in 
packet communications utilizing an Intemet service pro- 
vided by the mobile communication networi<, according 
to a message received from a nearest neighbor router 
device in the mobile communication network; and third 
computer program codes for causing the computer to 
carry out the packet communications utilizing the Inter- 
net service, notify a first message indicating a start of a 
utilization of the internet service using the global ad- 
dress to the nearest neighbor router device at a time of 
starting the utilization of the Internet service using the 
global address, and notify a second message indicating 
an end of the utilization of the Intemet service using the 
global address to the nearest neighbor router device at 
a time of ending the utilization of the Internet service 
using the global address. 

[001 5] According to another aspect of the present in- 
vention there is provided a computer program product 
for causing a computer to function as a mobile terminal 
device, the computer program product comprising: first 
computer program codes for causing the computer to 
make access to a mobile communication network; sec- 
ond computer program codes for causing the computer 
to set up a global address that is unique on internet and 
that should be used by the mobile tenninal device in 
packet communications utilizing an Intemet service pro- 
vided by the mobile communication network, according 
to a message received from a nearest neighbor router 
device in the mobile communication network; and third 
computer program codes for causing the computer to 
carry out the packet communications utilizing the Inter- 
net service, notify a first message Indicating a start of a 
utilization of the Internet service using the global ad- 
dress to the nearest neighbor router device at a time of 
starting the utilization of the internet service using the 
global address, and notify a second message to the 
nearest neighbor router devtee, when delivery to the mo- 
bile tenninal device of a specific packet that Is destined 
to the global address of the mobile terminal device and 
that has been delivered from the nearest neighbor router 
device is not desired, the second message indicating a 



desire for not receiving the delivery of the specific packet 
to the mobile temitnal device and a prescribed condition 
to be satisfied by the specific packet. 
[001 6] According to another aspect of the present In- 
vention there Is provided a computer program product 
for causing a computer to function as a router device 
provided in a mobile communication networi< providing 
an intemet service, the computer program product com- 
prising: first computer program codes for causing the 
computer to transmit a router message to be used in 
assigning a global address that is unique on Internet 
with respect to a mobile tenninal device within a networi< 
link to which the router device is connected; and second 
computer program codes for causing the computer to 
deliver arrived packets destined to the global address 
of the mobile tenninal device, to the mobile temninal de- 
vice upon receiving a first message indicating a start of 
a utilization of the Intemet service using the global ad- 
dress from the mobile terminal device, and discard ar- 
rived packets destined to the global address of the mo- 
bile terminal device upon receiving a second message 
Indicating an end of the utilization of the Intemet sen/ice 
using the global address from the mobile temninal de- 
vice. 

[001 7] According to another aspect of the present in- 
vention there is provided a computer program product 
for causing a computer to function a router device pro- 
vided In a mobile communication network providing an 
Internet service, the computer program product com- 
prising: first computer program codes for causing the 
computer to transmit a router message to be used in 
assigning a global address that is unique on Internet 
with respect to a mobile tenninal device within a networic 
link to which the router device is connected; and second 
computer program codes for causing the computer to 
deliver arrived packets destined to the global address 
of the mobile tenninal device, to the mobile tenninal de- 
vice upon receiving a first message indicating a start of 
a utilization of the Internet service using the global ad- 
dress from the mobile temninal device, and discard a 
specific packet that satisfies a prescribed condition in- 
dicated by a second message among arrived packets 
destined to the global address of the mobile tenninal de- 
vice after receiving a second message from the mobile 
tenninal device, the second message indicating a desire 
for not receiving delivery to the mobile tenninal device 
of the specific packet that is destined to the global ad- 
dress of the mobile terminal device and the prescribed 
condition to be satisfied by the specific packet. 
[0018] The present Invention can be implemented ei- 
ther in hardware or on software in a general purpose 
computer. Further the present invention can be imple- 
mented in a combination of hardware and software. The 
present Invention can also be implemented by a single 
processing apparatus or a distributed networic of 
processing apparatuses. 

[001 9] Since the present invention can be Implement- 
ed by software, the present invention encompasses 
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computer code provided to a general purpose computer 
on any suitable carrier medium. The carrier medium can 
comprise any storage medium sucli as a floppy disk, a 
CD ROM, a magnetic device or a programmable mem- 
ory device, or any transient medium such as any signal 
e.g. an electrical, optical or microwave signal. 
[0020] Otiier features and advantages of the present 
invention will become apparent from the following de- 
scription taken In conjunction with the accompanying 
drawings. 

[0021] Fig. 1 is a block diagram showing an exempla- 
ry configuration of a communication system according 
to one embodiment of the present invention. 
[0022] Fig. 2 is a block diagram showing an exempla- 
ry configuration of a router devk^e in the communication 
system of Fig. 1 . 

[0023] Fig. 3 is a block diagram showing an exempla- 
ry configuration of a mobile temriinai device in the com- 
munication system of Fig. 1 . 

[0024] Fig. 4 is a sequence chart showing an exem- 
plary procedure at a time of starting the use of a global 
address In the communication system of Fig. 1 . 
[0025] Fig. 5 is a flow chart showing an exemplary 
processing procedure of a mobile tenninal device at a 
time of starting the use of a global address by the pro- 
cedure of Fig. 4. 

[0026] Fig. 6 is a sequence chart showing an exem- 
plary procedure at a time of ending the use of a global 
address in the communication system of Fig. 1 . 
[0027] Fig. 7 Is a flow chart showing an exemplary 
processing procedure of a mobile tenninal device at a 
time of starting the use of a global address by the pro- 
cedure of Fig. 6. 

[0028] Fig. 8 Is a block diagram showing another ex- 
emplary configuration of a router device in the commu- 
nication system of Fig. 1 . 

[0029] Fig. 9 is a sequence chart showing an exem- 
plary procedure at a time of pemnittlng delivery of spe- 
cific packets to a mobile terminal devk:e in the commu- 
nication system of Fig. 1 . 

[0030] Fig. 10 is a flow chart showing an exemplary 
processing procedure of a router device at a time of per- 
mitting delivery of specific packets to a mobile temriinai 
device by the procedure of Fig. 9. 
[0031] Fig. 11 is a sequence chart showing another 
exemplary procedure at a time of permitting delivery of 
specific packets to a mobile tenninal device in the com- 
munication system of Fig. 1 . 

[0032] Fig. 12 is a diagram showing an exemplary 
message fomnat for a receiving rejection message to be 
used at a time of permitting delivery of specific packets 
to a mobile tenninal device by the procedure of Fig. 11 . 
[0033] Fig. 13 is a flow chart showing another exem- 
plary processing procedure of a router device at a time 
of permitting delivery of specific packets to a mobile ter- 
minal device by the procedure of Fig. 11 . 



DETAILED DESCRIPTION OF THE INVENTION 

[0034] Refen^ing now to Fig. 1 to Fig. 13, one embod- 
iment of a communication system according to the 
5 present invention will be described in detail. 

[0035] Fig. 1 shows an exemplary configuration of a 
communication system according to this embodiment. 
p)036] In Fig. 1, a region enclosed by a dashed line 
.12 con^esponds to a mobile carrier network portion, in 
10 the mobile canier network 1 2, a plurality of network links 
are connected through a cellular phone network 6 and 
router devices 4. The mobile carrier network 12 Is as- 
sumed to be originally providing the ordinary voice com- 
munication service, but a configuration for providing the 
15 ordinary votee communication service Is omitted In Fig. 
1. 

[0037] Note thatthis embodiment is directed to the ex- 
emplary case where one mobile canier manages Its own 
packet communication network as a single manage- 
ment domain, but there can also be cases where one 
mobile carrier has a plurality of management domains, 
cases where a plurality of mobile carriers have a single 
common management domain, and any combination of 
these cases. 

[0038] The mobile tenninal device 1 (such as a port- 
able tenninal or a portable telephone, for example) will 
be connected to the corresponding network link through 
a wireless base station 5 con^esponding to a geographic 
location of the mobile tenninal device 1 . Then, the mo- 
bile terminal device 1 becomes capable of carrying out 
packet communications with a node located within the 
same network link, a node within the same management 
domain through the router device 4, or a node located 
outside the management domain through the router de- 
vbe 4 and the Internet 7. 

[0039] Here, the case where the mobile terminal de- 
vice 1 cames out communications with correspondents 
(such as server devices 2a, 2b and 2c or conrespondent 
terminal devices (other mobile temninal devices, for ex- 
ample) 3b and 3c) will be described. In this case, the 
relative positional relationship on the network between 
the mobile terminal device 1 and the correspondent can 
be any one of the following three cases: 

(1) a positional relationship of the case where the 
correspondent is connected to the same network 
link as the mobile terminal device 1 ; 

(2) a positional relationship of the case where the 
con-espondent Is connected to a network link which 
Is different from that of the mobile tennina! device 1 
and which is contained within the same manage- 
ment domain as the mobile terminal device 1 ; and 

(3) a positional relationship of the case where the 
conrespondent is not connected to a network link 
that is contained in the same management domain 
as the mobile tenninal device 1 , that is, the corre- 
spondent Is connected to the general Internet dif- 
ferent from the network links of the above two cas- 
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[0040] In the example of Fig. 1 , the server device 2a 
corresponds to the positional relationship (1 ). the server 
device 2b and the con^espondent terminal device 3b cor- s 
respond to the positional relationship (2), and the server 
device 2c and the con-espondent terminal device 3c cor- 
respond to the positional relationship (3). 
[0041 ] These three types of the positional relationship 
are In correspondence to the concept called "address 
scope" defined In the IPv6. In the IPv6, the following 
three address scopes are defined (see RFC 2373 for 
further details). 

(1) Link local address 

[0042] This is an address valid only within the same 
network link, which has a prefix of 1111 1110 10 in the 
IPv6. 

(2) Site local address 

[0043] This is an address valid only within the same 
management domain, whteh has a prefix of 1111 1110 
11 in the IPv6. 

(3) Global address 

[0044] This is an address which Is unique over the en- 
tire Internet. 

[0045] Namely, in the example of Fig. 1 , the mobile 
temiinai device 1 can carry out communications using 
(arbitrary address containing) the link local address with 
respect to the server device 2a which is located on the 
same network link as the mobile tenninal device 1 , and 
communications using a site local address (or a global 
address) with respect to a server device 2b which is lo- 
cated in the same management domain as the mobile 
tenninal device 1 . On the other hand, the mobile temii- 
nai device 1 will carry out communications using a global 
address with respect to the server device 2c whbh is 
located on the general Internet 7. 
[0046] In this embodiment, the packettransfer with re- 
spect to the mobile tenninal device 1 will be controlled 
by using this address scope function. 
[0047] Fig. 2 shows an exemplary configuration of the 
router device 4 in this embodiment. 
[0048] This router device 4 has basic functions similar 
to those of an ordinary router compatible with the IPv6 
provided by an IPv6 router core 61 , but also has an ad- 
ditional function provided by a message processing unit 
62 for processing messages transmitted from the mobile 
tenninal devtee 1 such as an address information noti- 
fication message and a neighbor cache entry deletion 
message. 

[0049] The message processing unit 62 analyzes the 
received message, and when the received message is 
the address information notification message, the mes- 
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sage processing unit 62 creates an entry corresponding 
to that mobile tenninal devk:e 1 (for indicating infomna- 
tion on a con^espondence between the global address 
of that mobile terminal device 1 and the MAC address 
on a link) in a neighbor cache 63 (which corresponds to 
the ARP table of the IPv4), whereas when the received 
message is the neighbor cache entry deletion message, 
the message processing unit 62 invalidates an entry cor- 
responding to that mobile tenninal device 1 in the neigh- 
bor cache 63. 

[0050] Fig. 3 shows an exemplary configuration of the 
mobile temninai device 1 in this embodiment. 
[QOSI] As shown In Fig. 3, this mobile tenninal device 
1 comprises a communication interface 20, avoice com- 
munication unit 21 for carrying out ordinary votee com- 
munications, a packet communication unit 22 for carry- 
ing out packet communications according to the IPv6, 
an address register 23, an application list 24, a memory 
25 and an active register 26. 

[0052] The mobile tenninal device 1 is capable of re- 
lating a plurality of IPv6 addresses with respect to one 
communication interface (capable of sending packets 
by using a plurality of IPv6 addresses from the same 
communication interface). The address register 23 is 
used for the purpose of storing these addresses. 
[0053] A various IPv6 applications are to be operated 
on the mobile terminal device 1 side, and an application 
list 24 is used for storing a list of these applications 
(which includes Infonnation for identifying each applica- 
tion (a file name, for example) and an application type 
of each application or a protocol type, for example). 
[0054] Also, when the specific application is activated 
by the user, the application is operated on the memory 
25, while the active register 27 registers infonnation re- 
garding the currently operated application. 
[0055] The communication interface 20 of this mobile 
tenninal device 1 can be always assigned with one or 
both of the link local address and the site local address. 
The link local address and the site local address will be 
derived from the prefix defined In the IPv6 and the de- 
vice ID of this mobile tenninal device 1. Note that It is 
also possible for the communication service provider to 
assign arbitrary address as an address to be used In the 
same network link. Also, which one of the link local ad- 
dress alone, the site local address alone, and both the 
link local address and the site local address is to be al- 
ways assigned can be detennined according to the poi- 
tey of the communication service provider. 
[0056] In this way, the mobile terminal devtee 1 be- 
comes always capable of utilizing (canying out commu- 
nications for) on-IInk services using (arbitrary address 
containing) the link local address (such as the advertise- 
ment delivery from a specific wireless base station 
group, for example), and/or services within domain 
which are services of the sen/Ice provider in this embod- 
iment (such as infonnation service limited to the users 
of that service provider, for example). 
[0057] On the other hand, the global address to be 
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assigned wilt be generated from a network prefix deliv- 
ered from the nearest neighbor router device 4 and the 
ID infomiatlon (EUh64) of the mobile temilnal device 1 , 
according to the "Stateless Address Autoconfiguration" 
(RFC 2461) defined In the IPve. 
[0058] The basic procedure for the global address 
generation is as follows. Namely, the router device 4 
regularly broadcasts a router advertisement message 
on-IInk, or the router device 4 returns a response mes- 
sage upon receiving an Inquiry message, and the mobile 
temilnal device 1 receives the router advertisement 
message, or sends an inquiry message and receives the 
response message, generates the global address by us- 
ing the network prefix contained in the received mes- 
sage, and transmits an address information notification 
message containing the generated IPv6 address and a 
MAC address to the router device 4 side. Upon receiving 
the address information notification message, the router 
device 4 makes an entry of a con^esponding infomiatlon 
Into the corresponding neighbor cache 63. As a result, 
the nearest neighbor router device 4 will carry out the 
delivery of packets destined to the mobile terminal de- 
vice 1 . 

[0059] Note that the user may be all owed to freely car- 
ry out the acquisition, setting and starting of the use of 
the IPv6 global address, or the discarding, setting and 
ending of the use of the IPv6 global address. However, 
In this embodiment, it Is assumed that the processing 
for starting the use of the global address is carried out 
when the user of the mobile terminal device 1 activates 
an application that requires the global address, and the 
processing for ending the use of that global address Is 
carried out when that application is terminated. In prac- 
ttee, not necessarily ail of the applteations that can be 
activated on the mobile terminal device 1 will make ac- 
cesses requiring global addresses, so that the pres- 
ence/absence of the use of the global address Is regis- 
tered for each application in the application list 24, and 
the processing will be carried out only in relation to the 
activation or the tenninatlon of the application that re- 
quires the global address. 

[0060] First, the processing at a time of starting the 
use of the global address will be described. 
[0061] Fig. 4 shows an exemplary processing se- 
quence at a time of starting the use of the global ad- 
dress, and Fig. 5 shows an exemplary processing pro- 
cedure of the mobile temnlnai device 1 in this case. 
[0062] First, at the mobile terminal device 1, the ap- 
plication that requires the global address is activated by 
the user. 

[0083] When the application Is activated (step S11 
YES), the mobile terminal device 1 refers to the Infor- 
mation registered in the application list 24 (such as an 
application type or a protocol type, for example) (step 
S12), and Judges whether the activated application is 
one that requires the global address or not (step 813). 
When the activated application is one that requires the 
global address (step SI 3 YES), and acquires a network 



address from the nearest neighbor router device (step 
SI 4). 

[0064] Here, the mobile terminal device 1 transmits a 
router solicitation message (step SI), and in response 
5 a response message (router advertisement message) 
Is returned from the router device 4 to the mobile temni- 
nal device 1 (step S2). 

[0065] Upon receiving the response message from 
the router device 4, the mobile temnlnai device 1 gener- 
10 ates an IPv6 address by combining the network prefix 
contained In the response message with the device ID 
of the mobile tennlnal device 1 itself (step SI 5). 
[0066] The mobile terminal devrce 1 transmits an ad- 
dress infonnation notification message containing the 
15 generated iPv6 address and the MAC address to the 
router device 4 (step S3, step S1 6). Also, the mobile ter- 
minal device 1 makes a setting of Its own TCP/IP module 
according to that IPv6 address (step SI 7), and then op- 
erates that application. 

[0067] Notethat, in the above, the mobile tennlnal de- 
vice 1 acquires the network address by transmitting the 
router solicitation message, but it Is also possible for the 
mobile tenninal device 1 to receive the router advertise- 
ment message of the router device 4 that is distributed 
on-link and store the network address into a register (not 
shown) In advance. In such a case, the procedure re- 
garding the router solicitation message transmission 
and the response message reception can be skipped In 
Fig. 4. 

[0068] Note also that, in the case where a plurality of 
applications can be activated on the mobile terminal de- 
vice 1 , It Is possible to carry out the above described 
processing sequence when the activation of the appli- 
cation that requires the global address Is detected first. 
[0069] Next, the processing at a time of ending the 
use of the global address will be described. 
[0070] Fig. 6 shows an exemplary processing se- 
quence at a time of ending the use of the global address, 
and Fig. 7 shows an exemplary processing procedure 
of the mobile temilna! device 1 in this case. 
[0071] First, at the mobile terminal device 1 , the ap- 
plication that requires the global address is terminated 
by the user (or that application is forcefully tenninated 
by the OS or the like). 

[0072] When the temnination of the application is de- 
tected by refenring to the active register 26 (step S31 
YES), the mobile temnlnai device 1 refers to the appli- 
cation list 24 (step S32) and judges whether the termi- 
nated application Is one that requires the global address 
or not (step S33). When the temninal application Is one 
that requires the global address (step 833 YES), the mo- 
bile terminal device 1 transmits a neighbor cache entry 
deletion message containing the iPv6 address and the 
MAC address to the nearest neighbor router device 4 
(step S21, step 834). 

[0073] Upon receiving the neighbor cache entry dele- 
tion message, the router device 4 deletes the entry of 
this mobile terminal device 1 from the neighbor cache 
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63, and returns a response message to the mobile ter- , 
minai device 1 (step S22). In this way, even when a 
packet destined to the global address of this mobile ter- 
minal device 1 arrives from the Internet 7 side, it is re- 
garded as impossible to reach the destination at the s 
router device 4 and processed as an error. From a view- 
point of an attacker on the Internet, this implies that even 
if an attack to send an enormous amount of packets us- 
ing "ping" or the like is attempted by learning the global 
address of this mobile tenninai device 1 somehow, all 
the packets will be processed as errors (discarded) by 
the nearest neighbor router device 4 so that the attack 
will fail. 

[0074] Also, by sending the above described neighbor 
cache entry deletion message, there Is no need to reset 
the global address setting on the mobile terminal device 
1 side, and there is no need to delete the DNS entry 
corresponding to the mobile tenninai devbe 1 on the In- 
ternet, because even if the others learn the global ad- 
dress of the mobile tenninai device 1 , it does not matter 
since the filtering by the router device 4 side is provided 
as described above. Also, by maintaining the global ad- 
dress setting in the mobile terminal devtee 1 , there is an 
advantage that the set up can be made quk:ker at a time 
of activating the application next time (as long as the 
network ID remains unchanged). 
[0075] Note that, in the case where a plurality of ap- 
plications can be activated on the mobile tenninai device 
1 , it is possible to carry out the above described process- 
ing sequence when the tenninatlon of all the applica- 
tions that require the global address is detected first. 
[0076] In the above, the global address is made avail- 
able while the application that requires the global ad- 
dress Is activated, but it is also possible to make the 
global address available while the application is activat- 
ed regardless of whetherthe activated application is one 
that requires the global address or not. 
[0077] Now, the above description is directed to the 
case where the neighbor cache entry itself in the router 
device 4 Is to be deleted when the application that uses 
the global address is temninated at the mobile terminal 
device 1 side. This method presupposes the case where 
applications in which accesses to ail the global address 
regions will be carried out by the initiative of the mobile 
tenninai device 1 (such as WEB accesses), as well as 
applications in which packets destined to the mobile ter- 
minal device 1 will arrive from another node in tenns of 
the global addresses such as VOIP that are increasingly 
used recently, will not be used after the use of the global 
address is ended. 

[0078] For this reason, it is possible to use a method 
in which a passing permitted protocol specifying mes- 
sage, that contains an application type or a protocol type 
that should be used In those packets which are permit- 
ted to be transferred individually even after the general 
use of the global address is ended by the neighbor 
cache entry deletion message, is transmitted from the 
mobile terminal devtee 1 to the router device 4 and reg- 



isters it at the router device 4 side in advance, in order 
to make it possible to utilize the above noted applica- 
tions continuously even after the procedure for ending 
the use of the global address is earned out. In the fol- 
lowing, the exemplary configuration for providing such 
a function will be described. 

[0079] Fig. 8 shows an exemplary configuration of the 
router device 4 in this case. This router device 4 differs 
from that of Fig. 2 In that an access pemnission list 64 
to be defined for each mobile tenninai device separately 
is added. When the received message is the passing 
pemfiitted protocol specifying message, the message 
processing unit 62 makes an entry of the IPv6 global 
address of the corresponding mobile tenninai device 1 
and the protocol number for which the passing is to be 
permitted, into the access permission list 64. 
[0080] Fig. 9 shows an exemplary processing se- 
quence in this case. 

[0081] The mobile tenninai device 1 constantly reads 
out the application type or protocol type that can possi- 
bly arrive, from the application list 24, and transmits the 
passing permitted protocol specifying message indicat- 
ing this application type or protocol type and the global 
address of the mobile tenninai device 1 itself in advance, 
at a prescribed timing (as a preliminary processing of 
the address acquisition of Fig. 4, for example) or at ar- 
bitrary timing since the activation of the mobile terminal 
device 1 until the transmission of the neighbor cache 
entry deletion message (step S41). Note that If the glo- 
bal address has not been generated yet at this timing, 
it will be generated by the procedure as described 
above. 

[0O82] Upon receiving the passing permitted protocol 
specifying message, the router device 4 makes an entry 
of the IPv6 global address of the con^esponding terminal 
and the application type or protocol type for which the 
passing is to be pemnitted, into the access permission 
list 64. 

[0083] Then, when the neighbor cache entry deletion 
message transmitted by the mobile terminal device 1 1s 
received (step S42), the router device 4 checks whether 
an entry related to that mobile terminal device 1 is reg- 
istered in the access permission list 64 or not first, with- 
out deleting the coaesponding entry in the neighbor 
cache 63 immediately. If there is a related entry in the 
access pennission list 64, a flag associated with the cor- 
responding entry in the neighbor cache 63 is turned ON 
without checking the neighbor cache 63 itself. If there Is 
no related entry in the access pennission list 64, the cor- 
responding entry in the neighbor cache 63 itself is 
cleared similarly as in the case of Fig. 6. Then, the router 
device 4 returns the response message to the mobile 
terminal device 1 (step S43), 
[0084] After that, when a packet destined to the global 
address of the mobile tenninai device 1 1s transfered to 
the router device 4, the router device 4 determines 
whether this packet should be delivered or discarded, 
by refemng to the neighbor cache entry, the flag asso- 
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ciated with the neighbor cache entry, and the access 
permission list entry as follows, for example. 

(1 ) When there is no neighbor cache entry, the pack- 
et is processed as error. 

(2) When there is a neighbor cache entry but the 
flag is ON, the access permission list is checlced, 
and if there is an entry matching with the destination 
address an and the application type or protocol type 
of the packet, the packet is delivered. Otherwise, 
the packet is processed as error. 

(3) When there Is a neighbor cache entry and the 
flag is ON, the packet is delivered immediately. 

[0085] Fig. 10 shows an exemplary processing pro- 
cedure of the router device 4 in this case. 
[0086] When a packet destined to the global address 
of the mobile tenminal device 1 arrives, the router device 
4 first refers to the neighborcache 63, for the destination 
global address of the an^lved packet (step S51), and if 
there is no corresponding entry (step S52 NO), this 
packet is processed as error and discarded (step S57). 
[0087] If there is a corresponding entry (step S52 
YES), the router device 4 refers to the flag associated 
with that entry (step S53), and if the flag is OFF (step 
S54 NO), this packet is delivered (step S58). 
[0088] If the flag is ON (step S54 YES), the router de- 
vice 4 refers to the access permission list 64, for the 
destination global address of the arrived packet (step 
S55), and if there is an entry matching with the destina- 
tion address and the application type or protocol type of 
this packet and this packet satisfies a condition for de- 
livery (step S56 YES), this packet is delivered (step 
S58). If there is no entiy matching with the destination 
address and the application type or protocol type of this 
packet so that this packet does not satisfy a condition 
for delivery (step 356 NO), this packet is processed as 
error and discarded (step 857). 
[0089] In this way, it is possible to perniit only the ar- 
rival of packets con^esponding to a specific protocol 
group, for example, even after the ending of the use of 
the global address. 

[0090] The above described arrived packet process- 
ing according to the access permission list is an exem- 
plary case in which the access permission list is regis- 
tered from the mobile temninal device 1 to the router de- 
vice 4 side in advance such that the control is carried 
out by the router device 4 side, but it is also possible to 
use a configuration in which the first arrived packet is 
transferred from the router device 4 to the mobile tenmi- 
nal device 1, whether or not to receive this packet is 
judged atthe mobile terminal device 1 side, and whether 
or not to deliver packets is detemnined at this point. In 
the following, the exemplary configuration for providing 
such a function will be described. 
[0091] Fig. 11 shows an exemplary processing se- 
quence in this case, in this case, the access permission 
list Is to be provided at the mobile terminal device 1 side 



rather than the router device 4 side. 
[0092] First, the mobile terminal device 1 generates a 
global address, and transmits the address Infomnation 
notification message containing the generated global 
5 address and the MAC address to the router device 4 in 
advance. 

[0093] Then, the first amved packet is delivered from 
the router device 4 to the mobile temninal device 1 side 
without any change. 
10 [0094] At the mobile terminal 1 side, the source ad- 
dress and the protocol or the like of this packet are an- 
alyzed, and if it is a packet that should be received, the 
application is activated and communications are contin- 
ued. If it Is a packet to be rejected, the mobile terminal 
15 device 1 transmits a receiving rejection message which 
explicitly indicates the global address of the mobile ter- 
minal device 1 , the source address, and the application 
type or protocol type, to the router device 4 (step S62). 
Fig. 1 2 shows an exemplary message format of the re- 
ceiving rejection message that contains the global ad- 
dress, the source address and the protocol number 
[0095] Upon receiving the receiving rejection mes- 
sage, the router device 4 sets up an appropriate filtering 
mle (a rule to be satisfied by packets to be discarded; 
such as a rule that enumerates combinations of the glo- 
bal address, the source address, and the protocol type 
for packets to be discarded, for example), according to 
the content of the receiving rejection message. There- 
after, the router device 4 is controlled such that any 
packet that satisfies this rule will not be transferred to 
the mobile temilnal device 1 side even if it arrives re- 
peatedly. 

[0096] Fig. 13 shows an exemplary processing pro- 
cedure of the router device 4 in this case. 
[0097] When a packet destined to the global address 
of the mobile terminal device 1 arrives, the router device 
4first refers totheneighborcache63, for the destination 
global address of the arrived packet (step S71), and if 
there is no corresponding entry (step S72 NO), this 
packet is processed as error and discarded (step S75). 
[0098] If there is a corresponding entry (step S72 
YES), the router device 4 refers to the filtering rule, for 
the destination global address of the arrived packet 
(step S73), and if this packet satisfies the filtering rule 
(step S74 YES), this packet is processed as error and 
discarded (step S75), whereas if this packet does not 
satisfy the filtering rule (step S74 NO), this packet is de- 
livered (step S76). 

[0099] Note that the mobile terminal device 1 may 
have any one or two or all three of the three types of 
functions (a function explained with reference to Fig. 4, 
a function explained with reference to Fig. 9, and a func- 
tion explained with reference to Fig. 11) regarding the 
use of the global address and the delivery of the arrived 
packet described above. The same is also true for the 
router device 4. 

[0100] Also, in the above, it Is assumed that the mo- 
bile temninal device 1 has the ordinary voice communl- 
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cation function, but the nioblle terminal device 1 may 
liave communication functions for information in other 
fonns such as text communications in addition to or in- 
stead of the ordinary voice communication function. The 
mobile tenninal device 1 may be a device which Is ca- 
pable of utilizing only the Internet service. The similar 
modifications are also possible with respect to the serv- 
ices provided by the communication service provider. 
[0101] As described above, according to the present 
invention, the address assignment and the entry into the 
neighbor cache are carried out by each mobile terminal 
device only when communications using the global ad- 
dress are actually required by the application, so that 
attacking paclcets from the global I nternet while commu- 
nications using the global address are unnecessary can 
be filtered out, and thereby the security with respect to 
the user of the mobile terminal device can be improved. 
Also, even in a state after the ending of the use of the 
global address, It is possible to receive the infonnation 
delivery In a limited area by using a link local address 
or the user sen/ice limited within the mobile carrier by 
using a site local address. 

[0102] in the present invention, the mobile tenminal 
device notifies a prescribed message to the nearest 
neighbor router device at a prescribed timing, and re- 
ceives the Internet service using the global address that 
is unique over the entire internet while the application 
that requires the global address is activated, whereas 
otherwise the delivery of packets at the nearest neigh- 
bor router devbe can be stopped, for example. 
[0103] Also, even when the global address is not 
used, if there is a possibility for receiving the arriving 
service from the Internet (such as VoIP), this can be han- 
dled by controlling the nearest neighbor router device In 
such a way that, when a packet destined to the mobile 
tenninal device is received, the protocol type or the like 
is checked and if it is a packet corresponding to the ar- 
riving service, this packet Is delivered, or a security 
mechanism specific to the arriving service (such as at- 
taching an authentication code) is requested and this 
packet is passed after checking by that security mech- 
anism, for example. 

[0104] Also, by making at least one of the link local 
address and the site local address always utilizable at 
the mobile terminal device, it becomes always possible 
to receive a service closed within the mobile carrier 
(such as a mail arrival notification) or the advertisement 
delivery carried out in each base station area independ- 
ently. 

[01 05] According to the present invention, It becomes 
possible to carry out end-to-end communications when- 
ever necessary while also preventing the unnecessary 
packet attacks from the global Internet, without signifi- 
cantly changing the framework of the conventional I Pv6. 
[0106] Thus according to the present Invention, the 
arrived packets are delivered from the nearest neighbor 
router device to the mobile tenninal device according to . 
the need such as when a prescribed application is acti- 



vated or when a prescribed packet has an^ived, so that 
it is possible to prevent the unnecessary packet attacks 
from the global Internet. 

[01 07] Note that the present invention can be realized 
5 easily by adding only some messaging protocol to the 
existing IPv6 devices, and the conventional IPv6 ad- 
dressing architecture can be used without any change. 
Consequently, it is advantageous in terms of the com- 
patibility with the existing devices. 
10 [0108] Note also that the present invention can be 
easily expanded according to the network management 
policies of the various mobile carriers. The present in- 
vention is also applicable not only to the IPv6 but also 
to the packet communications using the portable teie- 
f ^ phones that are proposed recently 

[0109] It is to be noted that the above described em- 
bodiments according to the present Invention may be 
conveniently implemented using a conventional general 
purpose digital computer programmed according to the 
teachings of the present specification, as will be appar- 
ent to those skilled in the computer art. Appropriate soft- 
ware coding can readily be prepared by skilled program- 
mers based on the teachings of the present disclosure, 
as will be apparent to those skilled in the software art. 
[01 10] In particular, each of the mobile tenninal device 
and the router device of the above described embodi- 
ment can be conveniently implemented in a form of a 
software package. 

[0111] Such a software package can be a computer 
program product which employs a storage medium in- 
cluding stored computer code which is used to program 
a computer to perfonn the disclosed function and proc- 
ess of the present invention. The storage medium may 
Include, but is not limited to, any type of conventional 
floppy disks, optical disks, CD-ROMs, magneto-optical 
disks, ROMs, RAMs, EPROMs. EEPROMs, magnetic 
or optical cards, or any other suitable media for storing 
electronic instructions. 

[0112] It is also to be noted that, besides those al- 
ready mentioned above, many modifications and varia- 
tions of the above embodiments may be made without 
departing from the novel and advantageous features of 
the present invention. 

[0113] Accordingly, all such modifications and varia- 
tions are Intended to be included within the scope of the 
appended claims. 



Claims 

1 . A packet transfer method , comprising: 

generating a global address that is unique on 
Internet at a mobile terminal device, the global 
address being an address which should be 
used by the mobile terminal device in utilizing 
an Internet service provided by a mobile com- 
munication network to which the mobile termi- 
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nal device is connected, according to a naes- 
sage received from a nearest neighbor router 
device In the mobile communication network; 
notifying a first message indicating a start of a 
utilization of the Internet service using the glo- 5 
bal address, from the mobile temninal device to 
the nearest neighbor router device at a time of 
starting the utilization of the Internet service us- 
ing the global address; 

delivering amved packets destined to the glo- io 
bai address of the mobile tennlnal device from 
the nearest neighbor router device to the mo- 
bile terminal device upon receiving the first 
message at the nearest neighbor router device; 
notifying a second message Indicating an end 
of the utilization of the Internet service using the 
global address from the mobile terminal device 
to the nearest neighbor router device at a time 
of ending the utilization of the Internet sen^ice 
using the global address; and so 
discarding arrived packets destined to the glo- 
bal address of the mobile terminal device at the 
nearest neighbor router device upon receiving 
the second message at the nearest neighbor 
router device. 25 

2. The packet transfer method of claim 1 , further com- 
prising: 

notifying a third message from the mobile ter- 30 
minal device to the nearest neighbor router de- 
vice before notifying the second message, 
when delivery to the mobile temilnal device of 
specific packets that satisfy a prescribed con- 
dition, that are destined to the global address 3S 
of the mobile terminal device and that will arrive 
at the nearest neighbor router device after the 
second message is notified to the nearest 
neighbor router device is desired, the third mes- 
sage indicating a desire for the delivery of the 40 
specific packets to the mobile terminal device 
and the prescribed condition to be satisfied by 
the specific packets; and 
delivering the specific packets that satisfy the 
prescribed condition Indicated by the third mes- 45 
sage among arlved packets destined to the 
global address of the mobile terminal device 
from the nearest neighbor router device to the 
mobile temiinai device and discarding any oth- 
er arrived packets destined to the global ad- so 
dress of the mobile terminal device at the near- 
est neighbor router device, after the second 
message is notified from the mobile terminal 
device upon receiving the third message from 
the mobile temninal device at the nearest neigh- S5 
bor router device. 

3. A packet transfer method, comprising: 



generating a global address that is unique on 
Internet at a mobile terminal device, the global 
address being an address which should be 
used by the mobile tennlnal device In utilizing 
an Internet service provided by a mobile com- 
munication network to which the mobile termi- 
nal device is connected, according to a mes- 
sage received from a nearest neighbor router 
device in the mobile communication network; 
notifying a first message indrcating a start of a 
utilization of the Internet service using the glo- 
bal address, from the mobile terminal device to 
the nearest neighbor router device at a time of 
starting the utilization of the Internet service us- 
ing the global address; 

delivering arrived packets destined to the glo- 
bal address of the mobile terminal device from 
the nearest neighbor router device to the mo- 
bile terminal device upon receiving the first 
message at the nearest neighbor router device; 
notifying a second message from the mobile 
tennlnal device to the nearest neighbor router 
device, when delivery to the mobile terminal de- 
vice of a specific packet that is destined to the 
global address of the mobile temninal device 
and that has been delivered from the nearest 
neighbor router device Is not desired, the sec- 
ond message indicating a desire for not receiv- 
ing the delivery of the specify packet to the mo- 
bile temninal device and a prescribed condition 
to be satisfied by the specific packet; and 
discarding the specific packet that satisfies the 
prescribed condition indicated by the second 
message among arrived packets destined to 
the global address of the mobile tennlnal device 
at the nearest neighbor router device after re- 
ceiving the second message from the mobile 
terminal device at the nearest neighbor router 
device. 

4. A mobile tennlnal device, comprising: 

a communication Interface configured to make 
access to a mobile communication network; 
an address setting unit configured to set up a 
global address that Is unique on Internet and 
that should be used by the mobile terminal de- 
vice In packet communications utilizing an In- 
ternet service provided by the mobile commu- 
nication network, according to a message re- 
ceived from a nearest neighbor router device in 
the mobile communication network; and 
a packet communication unit configured to car- 
ry out the packet communications utilizing the 
Internet service, notify a first message indicat- 
ing a start of a utilization of the Internet service 
using the global address to the nearest neigh- 
bor router device at a time of starting the utili- 
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zation of the Internet service using the global 
address, and notify a second message indicat- 
ing an end of the utilization of the Internet serv- 
ice using the global address to the nearest 
neighbor router device at atlme of ending the s 
utilization of the Internet service using the glo- 
bal address. 

5. The mobile terminal device of claim 4, wherein the 
packet communication unit notifies the first mes- io 
sage when an application that requires the global 
address is activated, and notifies the second mes- 
sage when the application that requires the global 
address is terminated. 

IS 

6. The mobile terminal device of claim 4 or 5, wherein 
the packet communication unit also notifies a third 
message to the nearest neighbor router device be- 
fore notifying the second message, when delivery 

to the mobile tenninal device of specific packets that 20 
satisfy a prescribed condition, that are destined to 
the global address of the mobile tenninal device and 
that will arrive at the nearest neighbor router device 
after the second message is notified to the nearest 
neighbor router device is desired, the third message 25 
indicating a desire for the delivery of the specific 
packets to the mobile terminal device and the pre- 
scribed condition to be satisfied by the specific 
packets. 

30 

7. The mobile tenninal device of claim 4, 5 or 6, where- 
in the packet communication unit maintains an entry 
for the mobile terminal device already registered in 
a name server on the Intemet at a time of notifying 

the second message to the nearest neighbor router 35 
device. 

8. The mobile tennlnai device of any one of claims 4-7, 
wherein the packet communication unit maintains 
data on the global address already set in a TCP/IP 40 
module operating on the mobile terminal device at 

a time of notifying the second message to the near- 
est neighbor router device. 

9. A mobile terminal device, comprising; 4s 

a communication interface configured to make 
access to a mobile communication network; 
an address setting unit configured to set up a 
global address that Is unique on Internet and so 
that should be used by the mobile tenninal de- 
vice In packet communications utilizing an In- 
temet service provided by the mobile commu- 
nication network, according to a message re- 
ceived from a nearest neighbor router device in ss 
the mobile communication network; and 
a packet communication unit configured to car- 
ry out the packet communications utilizing the 



Internet service, notify a first message indicat- 
ing a start of a utilization of the Internet service 
using the global address to the nearest neigh- 
bor router device at a time of starting the utili- 
zation of the Intemet service using the global 
address, and notify a second message to the 
nearest neighbor router device, when delivery 
to the mobile terminal device of a specific pack- 
et that Is destined to the global address of the 
mobile temnlnal device and that has been de- 
livered from the nearest neighbor router device 
is not desired, the second message indicating 
a desire for not receiving the delivery of the spe- 
cific packet to the mobile terminal device and a 
prescribed condition to be satisfied by the spe- 
cif packet. 

1 0. The mobile tenmina! device of any one of claims 4-9, 
wherein the address setting unit sets up the global 
address when an application that requires the glo- 
bal address is activated. 

11. The mobile tenninal device of any one of claims 
4-1 0, wherein the address setting unit sets up the 
global address according to a stateless address au- 
toconflguratlon as defined by IPv6. 

12. The mobile tenninal device of any one of claims 
4-1 1 , wherein the address setting unit also sets up 
one or both of a link local address that is valid only 
within a network link in the mobile communication 
network to which mobile tenninal device is connect- 
ed, and a site local address that is valid only within 
a management domain containing the network link 
in the mobile communication network to which the 
mobile tenninal device is connected, such that one 
or both of an Internet service using the link local ad- 
dress and an Internet service using the site local 
address are available to the packet communication 
unit. 

1 3. A router device provided in a mobile communication 
network providing an Internet service, the router de- 
vice comprising: 

a message processing unit configured to trans- 
mit a router message to be used in assigning a 
global address that Is unique on Internet with 
respect to a mobile terminal device within a net- 
work link to which the router device Is connect- 
ed; and 

a router processing unit configured to deliver 
an-ived packets destined to the global address 
of the mobile terminal device, to the mobile ter- 
minal device upon receiving a first message in- 
dicating a start of a utilization of the Intemet 
service using the global address from the mo- 
bile tenminai device, and discard amved pack- 
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ets destined to the global address of the mobile 
terminal device upon receiving a second mes- 
sage Indicating an end of the utilization of the 
Internet service using the global address from 
the mobile terminal device. 5 

1 4. The router device of claim 1 3, wherein the message 
processing unit is also configured to receive a third 
message from the mobile tennlnal device before re- 
ceiving the second message, the third message in- to 
dicating a desire for delivery to the mobile terminal 
device of specific packets that satisfy a prescribed 
condition, that are destined to the global address of 
the mobile terminal device and that will arrive at the 
router device after the second message is notified is 
to the router device, and the prescribed condition to 

be satisfied by the specific packets; and 

the router processing unit is also configured 
to deliver the specific packets that satisfy the pre- 
scribed condition indicated by the third message 20 
among arrived packets destined to the global ad- 
dress of the mobile terminal device, to the mobile 
tenninal device, and discard any other arrived pack- 
ets destined to the global address of the mobile ter- 
minal device, after the second message is notified 2S 
from the mobile temriinal device upon receiving the 
third message from the mobile terminal device. 

15. The router device of claim 13 or 14, wherein the 
message processing unit is configured to transmit 30 
the router message regularly as a router advertise- 
ment message defined by IPv6, or individually as a 
response to a nearest neighbor router solicitation 
message from the mobile terminal device. 

35 

16. A router device provided in a mobile communication 
network providing an Internet service, the router de- 
vice comprising: 

a message processing unit configured to trans- 40 
mit a router message to be used in assigning a 
global address that is unique on internet with 
respect to a mobile terminal device within a net- 
work link to which the router devrce is connect- 
ed; and 45 
a router processing unit configured to deliver 
arrived packets destined to the global address 
of the mobile temninal device, to the mobile ter- 
minal device upon receiving a first message in- 
dicating a start of a utilization of the Internet so 
service using the global address from the mo- 
bile temfitnal device, and discard a specific 
packet that satisfies a prescribed condition in- 
dicated by a second message among arrived 
packets destined to the global address of the S5 
mobile terminal device after receiving a second 
message from the mobile terminal device, the 
second message indicating a desire for not re- 



ceiving delivery to the mobile terminal device 
of the specific packet that is destined to the glo- 
bal address of the mobile terminal device and 
the prescribed condition to be satisfied by the 
specific packet. 

1 7. The router device of claim 1 6, wherein the message 
processing unit is configured to transmit the router 
message regularly as a router advertisement mes- 
sage defined by tPv6, or individually as a response 
to a nearest neighbor router solicitation message 
from the mobile terminal device. 

1 8. A computer program product for causing a compu- 
ter to function as a mobile temilnal device, the com- 
puter program product comprising: 

first computer program codes for causing the 
computer to make access to a mobile commu- 
nication network; 

second computer program codes for causing 
the computer to set up a global address that is 
unique on internet and that should be used by 
the mobile tenninal device in packet communi- 
cations utilizing an Internet servk^e provided by 
the mobile communication network, according 
to a message received from a nearest neighbor 
router device in the mobile communteation net- 
work; and 

third computer program codes for causing the 
computer to carry out the packet communica- 
tions utilizing the Internet service, notify a first 
message indicating a start of a utilization of the 
Internet service using the global address to the 
nearest neighbor router device at a time of 
starting the utilization of the Internet service us- 
ing the global address, and notify a second 
message indicating an end of the utilization of 
the Internet service using the global address to 
the nearest neighbor router device at a time of 
ending the utilization of the Internet service us- 
ing the global address. 

19. A computer program product for causing a compu- 
ter to function as a mobile terminal device, the com- 
puter program product comprising: 

first computer program codes for causing the 
computer to make access to a mobile commu- 
nication network; 

second computer program codes for causing 
the computer to set up a global address that is 
unique on Internet and that should be used by 
the mobile tenninal device in packet communi- 
cations utilizing an Internet service provided by 
the mobile communication network, according 
to a message received from a nearest neighbor 
router device in the mobile communteation net- 
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work; and 

third computer program codes for causing the 
computer to carry out the packet communica- 
tions utilizing the Internet service, notify a first 
message indicating a start of a utilization of the s 
Internet service using the global address to the 
nearest neighbor router device at a time of 
starting the utilization of the internet service us- 
ing the global address, and notify a second 
message to the nearest neighbor router device, 
when delivery to the mobile terminal device of 
a specific packet that Is destined to the global 
address of the mobile tenninal device and that 
has been delivered from the nearest neighbor 
router device is not desired, the second mes- '5 
sage indicating a desire for not receiving the 
delivery of the specific packet to the mobile ter- 
minal device and a prescribed condition to be 
satisfied by the specific packet. 

20 

20. A computer program product for causing a compu- 
ter to function as a router device provided In a mo- 
bile communication network providing an Internet 
service, the computer program product comprising: 

25 

first computer program codes for causing the 
computer to transmit a router message to be 
used in assigning a global address that is 
unique on Internet with respect to a mobile ter- 
minal device within a network link to which the 30 
router device is connected; and 
second computer program codes for causing 
the computer to deliver arrived packets des- 
tined to the global address of the mobile temil- 
nal device, to the mobile tenmlnal device upon 35 
receiving a first message indicating a start of a 
utilization ot the internet sen^lce using the glo- 
bal address from the mobile tenninal device, 
and discard arrived packets destined to the glo- 
bal address of the mobile tenninai device upon <o 
receiving a second message indicating an end 
of the utilization of the Intemet service using the 
global address from the mobile tenninal device. 

21 . A computer program product for causing a compu- 45 
ter to function a router device provided in a mobile 
communication network providing an Internet serv- 
ice, the computer program product comprising: 



26 

nal device, to the mobile tenninal device upon 
receiving a first message indicating a start of a 
utilization of the Internet service using the glo- 
bal address from the mobile terminal device, 
and discard a specific packet that satisfies a 
prescribed condition Indicated by a second 
message among arrived packets destined to 
the global address of the mobile terminal device 
after receiving a second message from the mo- 
bile terminal device, the second message indi- 
cating a desire for not receiving delivery to the 
mobile terminal device of the specific packet 
that is destined to the global address of the mo- 
bile tenninal device and the prescribed condi- 
tion to be satisfied by the specific packet.' 

22. A carrier medium carrying computer readable in- 
structions for controlling the computer to carry out 
the method of any one of claims 1 to 3. 
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first computer program codes for causing the so 
computer to transmit a router message to be 
used in assigning a global address that is 
unique on internet with respect to a mobile ter- 
minal device within a networic link to which the 
router device Is connected; and S5 
second computer program codes for causing 
the computer to deliver arrived packets des- 
tined to the global address of the mobile tenrni- 
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